Comments on: howto://use TMG 2010 as the Exchange edge transport server http://retrohack.com/how-to-use-tmg-2010-as-the-exchange-edge-transport-server/ lest the tubes become overfull Tue, 15 May 2012 22:46:35 +0000 hourly 1 http://wordpress.org/?v= By: Ed Fisherhttp://retrohack.com/how-to-use-tmg-2010-as-the-exchange-edge-transport-server/comment-page-1/#comment-2899 Ed Fisher Tue, 06 Mar 2012 05:23:13 +0000 http://retrohack.com/howtouse-tmg-2010-as-the-exchange-edge-transport-server/#comment-2899 David, see <a href="http://technet.microsoft.com/en-us/library/dd638158.aspx" rel="nofollow">this article</a> on considerations when upgrading from Exchange 2007 to 2010 and then <a href="http://technet.microsoft.com/en-us/library/ff805032.aspx" rel="nofollow">this checklist </a>for the step by steps. You might also run <a href="http://technet.microsoft.com/en-us/exdeploy2010/default.aspx" rel="nofollow">ExDeploy</a> to get a more tailored guide. As far as your settings, blacklists and whitelists are stored in AD, but specific configurations will need to be recorded from the 2007 FPE server and recreated on the 2010 Edge, and of course you will have to subscribe your new Edge server to the hub transport server in the nearest site. HTH Ed David, see this article on considerations when upgrading from Exchange 2007 to 2010 and then this checklist for the step by steps. You might also run ExDeploy to get a more tailored guide. As far as your settings, blacklists and whitelists are stored in AD, but specific configurations will need to be recorded from the 2007 FPE server and recreated on the 2010 Edge, and of course you will have to subscribe your new Edge server to the hub transport server in the nearest site.
HTH
Ed

]]> By: Davidhttp://retrohack.com/how-to-use-tmg-2010-as-the-exchange-edge-transport-server/comment-page-1/#comment-2897 David Sun, 04 Mar 2012 07:34:56 +0000 http://retrohack.com/howtouse-tmg-2010-as-the-exchange-edge-transport-server/#comment-2897 Appreciated for your prompt response!. In one of client, we plan to upgrade exchange edge server 2007/ (FPE) to edge server 2010+TMG+FPE.Could you please give me some best practices to go head with thisIf i install the edge server 2010+TMG in DMZ, how the existing anti spam and other settings will replicate to the new edge 2010 server+TMG+FPE.Please guide meWarmest regards, David Appreciated for your prompt response!. In one of client, we plan to upgrade exchange edge server 2007/ (FPE) to edge server 2010+TMG+FPE.

Could you please give me some best practices to go head with this

If i install the edge server 2010+TMG in DMZ, how the existing anti spam and other settings will replicate to the new edge 2010 server+TMG+FPE.

Please guide me

Warmest regards,
David

]]> By: Ed Fisherhttp://retrohack.com/how-to-use-tmg-2010-as-the-exchange-edge-transport-server/comment-page-1/#comment-2896 Ed Fisher Sun, 04 Mar 2012 00:48:03 +0000 http://retrohack.com/howtouse-tmg-2010-as-the-exchange-edge-transport-server/#comment-2896 The advantage is only in minimizing your server count. If you can afford more servers/need more for performance, use separate boxes. Edge and TMG give you IPS and anti-spam, but you need FPE for anti-malware. The advantage is only in minimizing your server count. If you can afford more servers/need more for performance, use separate boxes. Edge and TMG give you IPS and anti-spam, but you need FPE for anti-malware.

]]> By: Ed Fisherhttp://retrohack.com/how-to-use-tmg-2010-as-the-exchange-edge-transport-server/comment-page-1/#comment-2895 Ed Fisher Sun, 04 Mar 2012 00:46:26 +0000 http://retrohack.com/howtouse-tmg-2010-as-the-exchange-edge-transport-server/#comment-2895 Ford vs Chevy. If you haven't installed anything yet, follow the technet article. If you have already installed TMG, follow mine. Either way gets you to the same place. Ford vs Chevy. If you haven’t installed anything yet, follow the technet article. If you have already installed TMG, follow mine.
Either way gets you to the same place.

]]> By: Davidhttp://retrohack.com/how-to-use-tmg-2010-as-the-exchange-edge-transport-server/comment-page-1/#comment-2894 David Sat, 03 Mar 2012 19:09:09 +0000 http://retrohack.com/howtouse-tmg-2010-as-the-exchange-edge-transport-server/#comment-2894 I have one more question, you recommend to install the 1)TMG,2)edge and then 3)FPE.but in the below link , MS recommend to install 1)EDGE 2)FPE and 3)TMGhttp://technet.microsoft.com/nl-nl/library/ee207141%28en-us%29.aspxPlease clarify Thanks David I have one more question, you recommend to install the
1)TMG,2)edge and then 3)FPE.

but in the below link , MS recommend to install 1)EDGE 2)FPE and 3)TMG

http://technet.microsoft.com/nl-nl/library/ee207141%28en-us%29.aspx

Please clarify
Thanks
David

]]> By: Davidhttp://retrohack.com/how-to-use-tmg-2010-as-the-exchange-edge-transport-server/comment-page-1/#comment-2893 David Sat, 03 Mar 2012 18:26:40 +0000 http://retrohack.com/howtouse-tmg-2010-as-the-exchange-edge-transport-server/#comment-2893 Hi ED,Thanks for posting such a wonderful article!! congrats!What is the main advantage to have TMG,EDGE and FPE on the same server? All 3 have anti spam features but FPE has additional virus scanning features.Could you please explain ellaborate to get understand betterWarmest regards, David Hi ED,

Thanks for posting such a wonderful article!! congrats!

What is the main advantage to have TMG,EDGE and FPE on the same server? All 3 have anti spam features but FPE has additional virus scanning features.

Could you please explain ellaborate to get understand better

Warmest regards,
David

]]> By: Ed Fisherhttp://retrohack.com/how-to-use-tmg-2010-as-the-exchange-edge-transport-server/comment-page-1/#comment-2865 Ed Fisher Mon, 13 Feb 2012 19:13:08 +0000 http://retrohack.com/howtouse-tmg-2010-as-the-exchange-edge-transport-server/#comment-2865 You're welcome! You’re welcome!

]]> By: Weshttp://retrohack.com/how-to-use-tmg-2010-as-the-exchange-edge-transport-server/comment-page-1/#comment-2863 Wes Mon, 13 Feb 2012 18:48:36 +0000 http://retrohack.com/howtouse-tmg-2010-as-the-exchange-edge-transport-server/#comment-2863 The how-to regarding TMG 2010 and the Edge Transport Role was exactly what I was looking for. Thank you so much for your efforts. The how-to regarding TMG 2010 and the Edge Transport Role was exactly what I was looking for. Thank you so much for your efforts.

]]> By: jeromehttp://retrohack.com/how-to-use-tmg-2010-as-the-exchange-edge-transport-server/comment-page-1/#comment-2856 jerome Sat, 11 Feb 2012 07:37:47 +0000 http://retrohack.com/howtouse-tmg-2010-as-the-exchange-edge-transport-server/#comment-2856 Very appreciate and thank you for your replied. I have convince my supervisor have 2 NICs installed on TMG server. My TMG server is located at DMZ network and other then policy rules allowing SMTP traffic through the exchange edge server must be enabled during e-Mail policy setup, what other protocol is it require to add and allow pass through? My proxy server configure in internal network. Very appreciate and thank you for your replied. I have convince my supervisor have 2 NICs installed on TMG server. My TMG server is located at DMZ network and other then policy rules allowing SMTP traffic through the exchange edge server must be enabled during e-Mail policy setup, what other protocol is it require to add and allow pass through? My proxy server configure in internal network.

]]> By: Ed Fisherhttp://retrohack.com/how-to-use-tmg-2010-as-the-exchange-edge-transport-server/comment-page-1/#comment-2855 Ed Fisher Fri, 10 Feb 2012 20:16:48 +0000 http://retrohack.com/howtouse-tmg-2010-as-the-exchange-edge-transport-server/#comment-2855 Depends on how the internal NIC is configured. If it is on one of those networks the routing is implicit, but the other won't be reachable until you add it to the routing table with the next hop gateway. Ed Depends on how the internal NIC is configured. If it is on one of those networks the routing is implicit, but the other won’t be reachable until you add it to the routing table with the next hop gateway.
Ed

]]> By: Ed Fisherhttp://retrohack.com/how-to-use-tmg-2010-as-the-exchange-edge-transport-server/comment-page-1/#comment-2854 Ed Fisher Fri, 10 Feb 2012 20:15:37 +0000 http://retrohack.com/howtouse-tmg-2010-as-the-exchange-edge-transport-server/#comment-2854 With only one NIC, TMG is just a proxy and cannot do the content inspection and IPS work. I really urge you to deploy with two NICs and route traffic through the TMG to get the most out of it. Ed With only one NIC, TMG is just a proxy and cannot do the content inspection and IPS work. I really urge you to deploy with two NICs and route traffic through the TMG to get the most out of it.
Ed

]]> By: jeromehttp://retrohack.com/how-to-use-tmg-2010-as-the-exchange-edge-transport-server/comment-page-1/#comment-2852 jerome Fri, 10 Feb 2012 06:42:04 +0000 http://retrohack.com/howtouse-tmg-2010-as-the-exchange-edge-transport-server/#comment-2852 hello, one more question. TMG server will be deploy on DMZ network 176.23.x.x and connected to internal network 10.x.x.x and 192.168.x.x it is these routing table entries require enter during the installation of the TMG firewall? what if i didnt enter these entries , my email still able to flow in from external to internal user? Thanks. hello, one more question. TMG server will be deploy on DMZ network 176.23.x.x and connected to internal network 10.x.x.x and 192.168.x.x it is these routing table entries require enter during the installation of the TMG firewall? what if i didnt enter these entries , my email still able to flow in from external to internal user? Thanks.

]]> By: jeromehttp://retrohack.com/how-to-use-tmg-2010-as-the-exchange-edge-transport-server/comment-page-1/#comment-2851 jerome Fri, 10 Feb 2012 04:31:28 +0000 http://retrohack.com/howtouse-tmg-2010-as-the-exchange-edge-transport-server/#comment-2851 Hi Guys, thank you for your reply. i have question here. my server will be setup in DMZ network. i have read articles through and i know that it is recommended to have 2 NICs configure to connect to the internal and external. what if configure only with 1 NICs in a single server running Edge + TMG + FPE? what is the pros and cons? Hi Guys, thank you for your reply. i have question here. my server will be setup in DMZ network. i have read articles through and i know that it is recommended to have 2 NICs configure to connect to the internal and external. what if configure only with 1 NICs in a single server running Edge + TMG + FPE? what is the pros and cons?

]]> By: JRVhttp://retrohack.com/how-to-use-tmg-2010-as-the-exchange-edge-transport-server/comment-page-1/#comment-2827 JRV Thu, 02 Feb 2012 18:06:32 +0000 http://retrohack.com/howtouse-tmg-2010-as-the-exchange-edge-transport-server/#comment-2827 Adding to Ed's comment, MS has done a good job of integrating EX Edge, TMG & FPE, making it about as painless a mail hygiene solution as you could hope for. And it's the only anti-spam I'm aware of that's integrated with Outlook's Safe Senders List, making it easy for users to manage their own whitelists. Unless you're already invested in another mail hygiene product and can't or don't want to change, definitely use Edge + TMG + FPE. Adding to Ed’s comment, MS has done a good job of integrating EX Edge, TMG & FPE, making it about as painless a mail hygiene solution as you could hope for. And it’s the only anti-spam I’m aware of that’s integrated with Outlook’s Safe Senders List, making it easy for users to manage their own whitelists. Unless you’re already invested in another mail hygiene product and can’t or don’t want to change, definitely use Edge + TMG + FPE.

]]> By: Ed Fisherhttp://retrohack.com/how-to-use-tmg-2010-as-the-exchange-edge-transport-server/comment-page-1/#comment-2825 Ed Fisher Thu, 02 Feb 2012 17:56:35 +0000 http://retrohack.com/howtouse-tmg-2010-as-the-exchange-edge-transport-server/#comment-2825 TMG email protection works fine by itself, but it does not have all the functionality of Forefront Protection for Exchange (FPE.) If you want the full anti-X capabilities, you will want to install FPE. For example, TMG will protect your email servers from attacks against email services, but does not protect your users from malware within an email. See <a href="http://www.microsoft.com/en-us/server-cloud/forefront/protection-for-exchange-server.aspx" target="_blank" rel="nofollow">this</a> and <a href="http://www.microsoft.com/en-us/server-cloud/forefront/threat-management-gateway-benefits.aspx" target="_blank" rel="nofollow">this</a> for details. If you only want to protect your servers, TMG is enough. If you want to protect your users, you want FPE or other third party anti-x solution. Ed TMG email protection works fine by itself, but it does not have all the functionality of Forefront Protection for Exchange (FPE.)
If you want the full anti-X capabilities, you will want to install FPE. For example, TMG will protect your email servers from attacks against email services, but does not protect your users from malware within an email. See this and this for details. If you only want to protect your servers, TMG is enough. If you want to protect your users, you want FPE or other third party anti-x solution.
Ed

]]>